Check the origin of messages sent to evalbox's frame.

Because I'm a moron who didn't follow my own advice, I XSS'd HTML5Rocks.com. :/

Thanks to Dimitri DeFigueiredo for setting me straight.